Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/OM9sp83gq8JLzkuTWdaZtycRFbg.roa
File: OM9sp83gq8JLzkuTWdaZtycRFbg.roa (raw, json)
Hash identifier: 6zlXFie+AwK2F8W6WJu8AHXI3dxTSD6r6hI+SWEgdaY=
Subject key identifier: 38:CF:6C:A7:CD:E0:AB:C2:4B:CE:4B:93:59:D6:99:B7:27:11:15:B8
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 0198BE7214EDEB6649C9455863AB246EABFA
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/OM9sp83gq8JLzkuTWdaZtycRFbg.roa
Signing time: Mon 18 Aug 2025 18:30:04 +0000
ROA not before: Mon 18 Aug 2025 18:30:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216075
IP address blocks: 109.111.54.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:32:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:be:72:14:ed:eb:66:49:c9:45:58:63:ab:24:6e:ab:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Aug 18 18:30:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=38cf6ca7cde0abc24bce4b9359d699b7271115b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:47:c6:91:d2:fa:42:ff:31:9b:fe:45:f4:af:
ee:21:11:cb:b3:5a:00:d0:75:02:46:c2:42:a3:3c:
0b:38:45:e3:fb:58:b2:26:a8:06:03:4c:08:83:67:
96:ab:ad:92:27:93:da:44:be:b8:15:05:01:fe:08:
26:7a:3e:c5:67:64:b4:15:78:12:a0:2d:a9:5d:26:
b7:88:58:36:39:96:59:f1:5e:fa:3a:3b:22:ca:42:
43:51:4b:fd:de:67:fd:db:3a:09:51:76:83:76:0d:
29:2a:dd:b1:be:05:77:a8:8c:cc:2b:45:ee:d7:1d:
1d:16:6d:f7:30:6d:eb:92:16:25:51:8a:72:b3:61:
ac:95:8f:bd:d0:4c:ac:69:07:6f:fb:04:3e:e7:42:
d3:53:4e:20:ed:1d:02:d5:47:3a:2c:e1:d1:d3:50:
d1:74:41:0b:f5:0f:34:3e:5c:b5:50:06:a6:dd:90:
8a:11:4c:36:77:99:64:86:1a:0e:ef:4f:b9:f9:be:
ac:9e:de:21:22:0e:da:3c:71:4b:48:66:48:a9:b7:
95:9c:b5:c0:f2:13:48:a7:89:3c:83:8f:11:46:27:
3e:11:e2:9d:bd:72:93:d6:3e:2c:e1:9e:7a:a3:43:
5c:44:30:88:eb:b1:f1:86:af:f6:4d:52:44:a7:8d:
be:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:CF:6C:A7:CD:E0:AB:C2:4B:CE:4B:93:59:D6:99:B7:27:11:15:B8
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/OM9sp83gq8JLzkuTWdaZtycRFbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.54.0/23
Signature Algorithm: sha256WithRSAEncryption
37:e6:ce:d8:7f:73:d7:18:9a:6a:20:14:93:18:61:68:0c:5a:
96:08:c3:a4:74:54:e7:90:6e:bc:2b:b4:db:af:19:cf:6d:0f:
dc:41:67:da:44:9a:5f:cd:c7:80:b6:bb:d4:68:81:58:19:b8:
59:ee:20:8e:49:63:14:9a:ef:15:86:31:8a:09:96:dd:fb:f2:
bf:78:ec:d2:83:0c:0a:97:de:a3:92:cb:3a:5b:71:c7:86:19:
11:88:b8:7c:be:e6:0c:20:1c:48:2c:ce:1e:07:93:3c:e7:3e:
0f:4d:f3:a5:b7:60:e3:af:a5:8f:ee:da:1b:df:7e:dc:7a:a9:
98:11:90:c6:0d:66:aa:42:79:c0:93:e6:de:a4:61:5e:d5:fc:
03:ad:0c:77:1f:b0:c5:77:4c:ca:fc:13:b1:30:45:22:ec:cb:
1d:bf:16:81:76:98:8a:3d:bf:3a:77:3e:4d:23:c2:fd:99:c3:
dc:44:20:7f:e1:f1:72:2c:28:d5:3a:bc:71:84:b7:41:db:d9:
11:6e:9c:81:fa:fb:12:fd:d7:12:e5:e4:dc:7d:68:12:53:6d:
27:ca:71:97:63:b3:13:c5:36:ed:f6:2c:ba:7e:14:e3:c2:c9:
24:b7:e3:34:0e:40:cb:da:e8:0b:3f:73:ef:e6:9f:6b:a8:82:
bf:9c:cc:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:24:56 2025 by rpki-client